rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10021/1:b..l rcu: (detected by 0, t=10503 jiffies, g=43077, q=795839 ncpus=2) task:syz.1.824 state:R running task stack:23536 pid:10021 tgid:10017 ppid:8778 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x1850/0x4c30 kernel/sched/core.c:6756 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7078 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:arch_stack_walk+0x102/0x150 arch/x86/kernel/stacktrace.c:27 Code: ff ff 4c 89 e6 4c 89 fa e8 0b d8 09 00 83 bd 70 ff ff ff 00 74 37 48 8d 9d 70 ff ff ff 48 89 df e8 b3 ae 09 00 48 85 c0 74 23 <4c> 89 f7 48 89 c6 4d 89 eb 41 ff d3 66 90 84 c0 74 11 48 89 df e8 RSP: 0018:ffffc90004a26900 EFLAGS: 00000286 RAX: ffffffff8a817cb1 RBX: ffffc90004a26900 RCX: ffffffff91792000 RDX: ffffffff91942801 RSI: ffffc90004a20000 RDI: ffffffff8a817cb1 RBP: ffffc90004a26990 R08: ffffc90004a27050 R09: 0000000000000000 R10: ffffc90004a26950 R11: fffff52000944d2c R12: ffff88802f0ebc00 R13: ffffffff818b4ab0 R14: ffffc90004a269e0 R15: 0000000000000000 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 save_stack+0xfb/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x76/0x430 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_unref_page+0xd3f/0x1010 mm/page_alloc.c:2659 __slab_free+0x2c2/0x380 mm/slub.c:4524 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4119 [inline] slab_alloc_node mm/slub.c:4168 [inline] __kmalloc_cache_noprof+0x1d9/0x390 mm/slub.c:4324 kmalloc_noprof include/linux/slab.h:901 [inline] call_modprobe kernel/module/kmod.c:83 [inline] __request_module+0x2b9/0x640 kernel/module/kmod.c:172 crypto_larval_lookup crypto/api.c:301 [inline] crypto_alg_mod_lookup+0xe7/0x760 crypto/api.c:348 crypto_find_alg crypto/api.c:597 [inline] crypto_alloc_tfm_node+0x130/0x360 crypto/api.c:634 esp_init_authenc net/ipv6/esp6.c:1119 [inline] esp6_init_state+0x611/0x10b0 net/ipv6/esp6.c:1189 __xfrm_init_state+0x9db/0xea0 net/xfrm/xfrm_state.c:3056 xfrm_state_construct net/xfrm/xfrm_user.c:854 [inline] xfrm_add_sa+0x2c6e/0x3d70 net/xfrm/xfrm_user.c:912 xfrm_user_rcv_msg+0x890/0xb90 net/xfrm/xfrm_user.c:3373 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2542 xfrm_netlink_rcv+0x79/0x90 net/xfrm/xfrm_user.c:3395 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1347 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891 sock_sendmsg_nosec net/socket.c:711 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:726 ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2583 ___sys_sendmsg net/socket.c:2637 [inline] __sys_sendmsg+0x269/0x350 net/socket.c:2669 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7ddd185d29 RSP: 002b:00007f7dddfcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f7ddd375fa0 RCX: 00007f7ddd185d29 RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 RBP: 00007f7ddd201b08 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f7ddd375fa0 R15: 00007f7ddd49fa28 rcu: rcu_preempt kthread starved for 1213 jiffies! g43077 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x1850/0x4c30 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6848 schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:queued_spin_lock include/asm-generic/qspinlock.h:109 [inline] RIP: 0010:do_raw_spin_lock+0x2d5/0x370 kernel/locking/spinlock_debug.c:116 Code: e1 07 80 c1 03 38 c1 0f 8c 3d fe ff ff 48 89 df e8 50 ba 89 00 48 ba 00 00 00 00 00 fc ff df e9 26 fe ff ff 44 89 f1 80 e1 07 <80> c1 03 38 c1 0f 8c 4d fe ff ff 4c 89 f7 e8 18 bb 89 00 e9 40 fe RSP: 0018:ffffc90000a178a0 EFLAGS: 00000046 RAX: 0000000000000004 RBX: dffffc0000000000 RCX: 0000000000a17900 RDX: dffffc0000000000 RSI: 1ffff92000142f1c RDI: ffff88806ed12608 RBP: ffffc90000a17970 R08: ffffffff942a58bf R09: 1ffffffff2854b17 R10: dffffc0000000000 R11: fffffbfff2854b18 R12: ffff88806ed12608 R13: 1ffff92000142f20 R14: ffffc90000a17900 R15: 1ffff1100dda24c2 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe5b7c758e5 CR3: 000000002d9b8000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:111 [inline] _raw_spin_lock_irqsave+0xe1/0x120 kernel/locking/spinlock.c:162 ref_tracker_alloc+0x1c3/0x490 lib/ref_tracker.c:212 __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_hold include/linux/netdevice.h:4165 [inline] dst_init+0xee/0x490 net/core/dst.c:52 dst_alloc+0x14f/0x190 net/core/dst.c:93 rt_dst_alloc net/ipv4/route.c:1625 [inline] __mkroute_output net/ipv4/route.c:2618 [inline] ip_route_output_key_hash_rcu+0x13cc/0x2390 net/ipv4/route.c:2840 ip_route_output_key_hash+0x193/0x2b0 net/ipv4/route.c:2669 __ip_route_output_key include/net/route.h:141 [inline] ip_route_output_flow+0x29/0x140 net/ipv4/route.c:2897 ip_route_output_key include/net/route.h:151 [inline] ip_route_me_harder+0x877/0x1360 net/ipv4/netfilter.c:53 synproxy_send_tcp+0x356/0x6c0 net/netfilter/nf_synproxy_core.c:431 synproxy_send_client_synack+0x8a4/0xe20 net/netfilter/nf_synproxy_core.c:484 nft_synproxy_eval_v4+0x3ca/0x610 net/netfilter/nft_synproxy.c:59 nft_synproxy_do_eval+0x362/0xa60 net/netfilter/nft_synproxy.c:141 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x418/0x6b0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314 __netif_receive_skb_one_core net/core/dev.c:5704 [inline] __netif_receive_skb+0x2bf/0x650 net/core/dev.c:5817 process_backlog+0x662/0x15b0 net/core/dev.c:6149 __napi_poll+0xcb/0x490 net/core/dev.c:6902 napi_poll net/core/dev.c:6971 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:7093 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561 do_softirq+0x11b/0x1e0 kernel/softirq.c:462 __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:389 spin_unlock_bh include/linux/spinlock.h:396 [inline] cfg80211_inform_single_bss_data+0x1707/0x2070 net/wireless/scan.c:2350 cfg80211_inform_bss_data+0x3ce/0x5e80 net/wireless/scan.c:3189 cfg80211_inform_bss_frame_data+0x3bb/0x720 net/wireless/scan.c:3284 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226 ieee80211_rx_bss_info net/mac80211/ibss.c:1101 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1580 [inline] ieee80211_ibss_rx_queued_mgmt+0x1969/0x2d70 net/mac80211/ibss.c:1607 ieee80211_iface_process_skb net/mac80211/iface.c:1613 [inline] ieee80211_iface_work+0x8a5/0xf20 net/mac80211/iface.c:1667 cfg80211_wiphy_work+0x2db/0x480 net/wireless/core.c:440 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3317 worker_thread+0x870/0xd30 kernel/workqueue.c:3398 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244